In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts. (CVE-2023-26081) References: . MGASA-2023-0099 - Updated epiphany packages fix security vulnerability Publication date: 18 Mar 2023 URL: https://advisories.mageia.org/MGASA-2023-0099.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-26081 In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts. (CVE-2023-26081) References: - https://bugs.mageia.org/show_bug.cgi?id=31609 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.